Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the GOOSE subscriber component when processing unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. An attacker can cause the process to crash and disrupt service by sending a specially...

CVE-2026-66720: Out-of-bounds Read

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing,...